Your privacy

1. 1. What Knitted collects
2. 2. What stays on your phone
3. 3. How we use it
4. 4. Who helps us run Knitted
5. 5. Advertising
6. 6. Keeping it safe
7. 7. How long we keep it
8. 8. Your choices
9. 9. Your rights
10. 10. Consumer health data
11. 11. Children
12. 12. Where it's stored
13. 13. Changes
14. 14. Contact us

This policy covers the Knitted app for iPhone and Android and these pages. "Knitted", "we", and "us" mean Krux Lab LLC. "You" means the person using Knitted.

01What Knitted collects

What you tell Knitted

• Your answers when you set up. Where you are right now (tracking your cycle, trying to conceive, pregnant, or after a birth), and dates such as your last period, a due date, or a birth date. Some answers are about a pregnancy, a birth, or a loss.
• What you log. Periods, signs and symptoms, temperatures, appointments, kicks, feeds, sleep, diapers, vaccines, well visits, milestones, foods, and firsts.
• What you write. Journal entries, a birth story, and notes.
• Names, if you add them. Your first name, your baby's name, and name ideas. These are optional.
• Photos, if you add them. Bump photos you choose to keep in Knitted. Photos are saved as you took them, which can include details your camera stored in the file, such as where the photo was taken.
• Messages you send us, if you write to support.

Your account

After you buy Knitted, you sign in with Apple or Google so your journey is saved to an account. Apple or Google gives us an ID for you, which is how we recognize your account. They may also share your email address; we don't store it.

Purchases

You pay through the App Store, Google Play, or our web checkout. We see what you bought and when, and whether it's active. We never see your card details.

How the app is used

Knitted has no separate analytics tool. To learn whether setup and the paywall work, our purchase provider, RevenueCat, keeps a few simple details with your purchase record: how far you got through setup, how long it took, which paywall you saw, and, until you buy, where you are (for example, "pregnant", the trimester, or expecting twins) so the right plans are shown. They never include names, dates, notes, or what you log.

Where you found Knitted

If you open Knitted from one of our links, we keep the campaign it came from (for example, a newsletter or an ad). On iPhone, we may also receive the Apple Search Ads campaign that led to the download.

Device and diagnostic information

Like most apps, Knitted's services see basic technical details: your device model, operating system, app version, IP address, device identifiers used for purchases, and whether the app failed to start. Our servers keep short-lived logs to keep the service running and secure.

02What stays on your phone

• Apple Health and Health Connect. If you allow it, Knitted reads a few kinds of readings (such as period days, temperature, sleep, resting heart rate, and heart rate variability) to show beside your cycle. Knitted only reads; it never writes to them. The readings stay on your phone and aren't saved to your account.
• Oura. If you connect Oura, your phone fetches your daily readiness, sleep, and temperature changes directly from Oura. Those readings and your Oura sign-in stay on your phone. Our server only helps complete the sign-in, and it never stores or logs your Oura tokens.
• One exception: if you tap Confirm on a temperature reading, that one value is copied into your cycle notes, which are saved to your account.
• Reminders are scheduled on your phone.

Health app and wearable readings are never used for ads and are never used to estimate your fertile window.

03How we use it

• To run Knitted: show what you've logged, save it to your account, and bring it back on a new phone.
• To make Knitted fit where you are, for example showing pregnancy weeks only while you're pregnant.
• To handle your purchase, restore it, and answer you when you write to us.
• To understand, in aggregate, which parts of the app work and how people found it.
• To keep Knitted secure, prevent abuse, and meet legal obligations.

We don't sell your information, use it for advertising, or build advertising profiles.

04Who helps us run Knitted

A few companies process information on our behalf, under contracts that limit what they can do with it. Each sees only what its job needs:

We also share information when the law requires it, sharing only what's required, and if Krux Lab or Knitted is ever sold or merged, in which case this policy continues to apply to your information.

05Advertising

Knitted has no ads. We never send your health information or anything you log to advertising networks.

We do advertise Knitted. If you buy Knitted through our website after tapping one of our ads, the ad platform may be told that a purchase happened, so we can see which ads work. That never includes anything you track.

06Keeping it safe

• Everything Knitted sends travels over encrypted connections (HTTPS).
• Your saved journey and photos are encrypted at rest by our hosting provider, Cloudflare.
• Only your signed-in account can open your journey in Knitted. Your sign-in is kept in your phone's secure storage.

To be straight with you: Knitted is not end-to-end encrypted. Our systems can technically read what's stored in your account, and we limit that access to running and protecting the service. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

07How long we keep it

• Your account and journey: for as long as you have an account. Deleting your account removes it, every saved version of your journey, and your photos.
• Earlier versions: Knitted keeps recent earlier versions of your journey (every version from the last three days, and at least the latest ten) so a mix-up between two phones can be undone. Something you remove in the app can remain in those earlier versions until newer ones replace them, or until you delete your account.
• Purchase records at RevenueCat are not removed automatically when you delete your account yet. Email us and we'll delete them within 30 days. Records you need for a purchase, like the receipt from Apple or Google, are kept by them.
• Server logs are kept briefly, typically days, for security and troubleshooting.
• On your phone, signing out or deleting your account erases Knitted's copy.

08Your choices

• Export: Settings › Your data › Export my data gives you everything you've tracked as a file.
• Health apps and Oura: disconnect any time in Knitted's Settings, or in your phone's Health or Health Connect settings.
• Reminders: turn them off in Knitted or in your phone's notification settings.
• Delete your account: Settings › Delete account. See deleting your account, including how to ask if you no longer have the app.
• Optional details: names and photos are optional, and you can skip most setup questions.

09Your rights

Wherever you live, you can ask us to show you, correct, export, or delete your information. Depending on where you live (for example the EU, UK, California, Colorado, Connecticut, Virginia, Washington, or Nevada), you may also have the right to:

• know what we collect and how we use it, and get a copy in a portable format;
• correct or delete it;
• withdraw consent you've given, at any time;
• object to or limit some uses, and opt out of sale, targeted advertising, or profiling (we don't do these);
• appeal if we decline your request, and complain to your local data protection or consumer authority;
• not be treated differently for using these rights.

Email dev@kruxlab.com. We'll confirm the request comes from you, then answer within 30 days, or sooner if the law requires; complex requests may take up to 45 days more, and we'll tell you if so. To appeal a decision, reply to our answer with "Appeal" in the subject. An authorized agent can ask on your behalf with your written permission.

EU and UK

Krux Lab LLC is the controller of your information. We rely on: providing the app you asked for (contract); your explicit consent for health information, which you can withdraw by deleting your account; and our legitimate interests in keeping Knitted secure and understanding whether setup and purchases work (which you can object to by emailing us).

10Consumer health data

This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act, Nevada's consumer health data law, and similar laws. It covers information that identifies you and is about your physical health, including your reproductive health.

• What we collect: your cycle, fertility, pregnancy, birth, and loss information; what you log for yourself and your baby; your journey stage; and, if you confirm one, a temperature reading. Health app and Oura readings stay on your phone (section 2).
• Where it comes from: from you, as you set up and use Knitted, and from your phone's health apps or Oura, only if you connect them.
• Why: to provide the features you use, save your journey to your account, make the app fit where you are, and, for your journey stage only, understand how Knitted is used.
• Who receives it: the service providers in section 4, for those purposes. Your journey stage goes to RevenueCat; everything else you log goes only to Cloudflare, which stores your account.
• What we don't do: sell it, use it for advertising, or use location to target people near health care facilities.
• Your rights: to know whether we collect or share it and with whom, to withdraw consent, and to have it deleted, as described in sections 8 and 9.

11Children

Knitted is for adults. It isn't meant for children, and we don't knowingly collect information from anyone under 13 (or the age required where you live). Information about your baby or child is entered by you as their parent; you can change or delete it any time. If you believe a child has given us information, email us and we'll delete it.

12Where it's stored

Krux Lab is in the United States, and our providers may process information in the United States and other countries. Where the law requires it, we use recognized safeguards for these transfers.

13Changes

If we change this policy, we'll update the date at the top. If a change affects how we use information you've already given us, we'll tell you in the app before it takes effect and, where the law requires, ask for your consent.

14Contact us

Krux Lab LLC, Boulder, Colorado, United States

dev@kruxlab.com

Knitted is for everyday tracking and information. It isn't medical advice. Talk with your own care team about what's right for you.